Dominican Republic Law 172-13 Articles 23-24 + 26 + 80 Cross-Border + Third Parties + Marketing. Article 80 Cross-Border Data Transfers (Transferencias Internacionales) - transfer of personal data outside Dominican Republic permitted where: (1) destination jurisdiction provides adequate level of protection (Superintendencia de Bancos assessment + LatAm CBPR consideration + APEC Privacy Framework); (2) explicit informed consent of data subject; (3) Performance of contract; (4) Vital interests; (5) Compelling public interest; (6) Standard Contractual Clauses (recommended model) + Binding Corporate Rules equivalent + Codes of Conduct. Recognised adequate jurisdictions: EU/EEA + UK + Convention 108 parties (Mexico + Uruguay + Colombia + Argentina + Brazil LGPD + Chile + Peru + EU member states + Morocco + Tunisia). Schrems II Transfer Impact Assessment + supplementary measures. Article 23-24 Third Party Processors and Subcontractors - written contract specifying categories + purposes + duration + security + confidentiality + sub-processing prior authorisation + flow-down + audit rights + return/deletion at termination. Joint controllership + shared responsibility allocation. Article 26 Marketing and Direct Communications (Marketing Directo) - opt-in consent for electronic marketing + opt-out at every communication + Do-Not-Call considerations + Article 27 ePrivacy-like regime emerging + Telecommunications Law 153-98 coordination + INDOTEL regulations.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.